Los Angeles-based UCLA Health disclosed a data breach involving patient information that was inconsistent with the health system’s privacy policies governing protected health information.
UCLA Health discovered the activity on July 2, and took steps to stop it while launching an investigation. In some instances, patient information was also disclosed to an outside healthcare provider, according to an Aug. 3 news release from the health system.
The information involved varies by individual and may include patient names, addresses, dates of birth and health insurance information, along with clinical information such as referral orders. For some individuals, the last four digits of a Social Security number were also affected.
UCLA Health said no full Social Security numbers, financial account numbers or payment card information were involved.
The health system has not identified evidence that the information was further disclosed or misused. UCLA Health said it has reviewed its administrative and technical safeguards and is implementing additional measures to strengthen oversight of access to protected health information.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
